diff options
| author | Endi Sukma Dewata <edewata@redhat.com> | 2012-04-13 00:49:41 -0500 |
|---|---|---|
| committer | Endi Sukma Dewata <edewata@redhat.com> | 2012-04-13 11:05:37 -0500 |
| commit | cd1ab0aaa0f2882fb67bd30e7955a77e5116ae2b (patch) | |
| tree | 79fe686e9ac94583acc248450d63daa1ba0f3020 /scripts/ca-include.sh | |
| parent | 61ba4653098c9b37ba4679421cfb1a7856bd5669 (diff) | |
| download | pki-dev-cd1ab0aaa0f2882fb67bd30e7955a77e5116ae2b.tar.gz pki-dev-cd1ab0aaa0f2882fb67bd30e7955a77e5116ae2b.tar.xz pki-dev-cd1ab0aaa0f2882fb67bd30e7955a77e5116ae2b.zip | |
Added CA include script.
Diffstat (limited to 'scripts/ca-include.sh')
| -rwxr-xr-x | scripts/ca-include.sh | 39 |
1 files changed, 39 insertions, 0 deletions
diff --git a/scripts/ca-include.sh b/scripts/ca-include.sh new file mode 100755 index 0000000..20e2c67 --- /dev/null +++ b/scripts/ca-include.sh @@ -0,0 +1,39 @@ +#!/bin/sh -x + +SRC_DIR="`cd ../.. ; pwd`" + +DOMAIN="example.com" +REALM="EXAMPLE-COM" +PASSWORD="Secret123" + +INSTANCE_ROOT="/var/lib" +INSTANCE_USER="pkiuser" +INSTANCE_GROUP="pkiuser" + +CA_INSTANCE_NAME="pki-ca" + +CA_SUBSYSTEM_TYPE="ca" +CA_SUBSYSTEM_NAME="Certificate Authority" + +CA_SECURE_PORT="9443" +CA_UNSECURE_PORT="9180" +CA_TOMCAT_SERVER_PORT="9701" + +CA_LDAP_HOST="$HOSTNAME" +CA_LDAP_PORT="389" +CA_LDAP_DATABASE="$DOMAIN-$INSTANCE_NAME" +CA_LDAP_BASE_DN="ou=ca,dc=example,dc=com" +CA_LDAP_BIND_DN="cn=Directory Manager" +CA_LDAP_PASSWORD="$PASSWORD" + +CA_SIGN_CERT_SUBJECT_NAME="CN=$CA_SUBSYSTEM_NAME,O=$REALM" +CA_OCSP_CERT_SUBJECT_NAME="CN=OCSP Signing Certificate,O=$REALM" +CA_SERVER_CERT_SUBJECT_NAME="CN=$HOSTNAME,O=$REALM" +CA_SUBSYSTEM_CERT_SUBJECT_NAME="CN=CA Subsystem Certificate,O=$REALM" +CA_AUDIT_SIGNING_CERT_SUBJECT_NAME="CN=CA Audit Signing Certificate,O=$REALM" + +CA_ADMIN_USER="caadmin" +CA_ADMIN_NAME="$CA_ADMIN_USER" +CA_ADMIN_EMAIL="$CA_ADMIN_USER@$DOMAIN" +CA_ADMIN_PASSWORD="$PASSWORD" +CA_ADMIN_CERT_SUBJECT="CN=$CA_ADMIN_NAME,UID=$CA_ADMIN_USER,E=$CA_ADMIN_EMAIL,O=$REALM" |